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200 

To register an email by an originator 
(e.g "John Smith at email address 
jsmith@adomain.com) 



201 

originator creates an email message using any 
Internet Mail User Agent (MUA) 
(Note the message may have multiple 
destinations and attachments) 



FIG. 2A 
Preprocessing 



1 


f 


202 

The Registration System (RS), acting as the 
senders MTA receives a copy of email 




r 


2C 

RS will create a copy c 
to be stored until the r 
comi 


)3 

>f the original message 
■eg i st rat ion process is 
alete 



204 

RS creates a database record which 
included: 

The time at which the message was 
received. 

The names and sizes of the attachments of 
the message 

The name and address of each destination 
of the message. 

The time at which the message was 
delivered to the destination's MTA. 
The delivery status of each destination 



205 

RS sets the Delivery Status of each destination to 
"UNSENT" 



206 

RS generates and stores Message Digest 
(hash) of the body of the message. 



208 

RS creates a second copy to modify the original message 



209 

The original subject line of the message is amended to indicate that the copy 

is registered 
(e.g. by pre-pending "(R)egistered") 



210 

A notice that the message is registered by the RS, together with links to the 
RS's www site are appended to the body of the message. 



211 

Email headers are added requesting a Mail User Agent (MUA) reading 
notification in a variety of header formats recognized by various MUAs. 
The request for notification directs the notification to an destination whose 
name is the address of the originator of the message and whose address is a 

rpost.com account set up for this purpose. 
The notification will use the address of the original sender in the name field of 

the MUA request, 
(e.g. dispositions-notification-to: jsmith@adomin.com 
<readreceipt@rpost.com>) 



2T2 

Transmit the message 
(GOTO FIG B) 



207 

RS generates and stores a hash for each file 
attached to the message. 



520 

For each message destination the 
system will: 



221 

Change the Message header to show it as 
FROM: john smith < RCPTxxxxxy@rpost.com> 
where xxxxxx = a tag uniquely identifying this message 
where y = a tag identifying this destination of this message 



FIG. 2B 
Transmission 



222 

Perform an DNS MX lookup to identify the MTA(s) for the 
destination domain 



I 



223 

Attempts to open a telenet connection to the 
destination's MTA. 



228 

Retry using other MTA's for 
the destination if available. 




237 
Record 
destination's 
delivery status as 
"DELIVERED" 





System receives MTA 
Notification 



FIG. 2C 
Post-Processing 

Processing MTA Notifications 



1 


r 


241 

System scans incoming mail to 
rpost.com for addresses containing 
"rctp" 




r 


242 

System identifies messages 
addressed to 
"rcptxxxxxy@rpost.com" 
as delivery notifications for destination 
y of message xxxxxxx. 




r 


243 

System scans the subject and body of 
the message for strings indicating 
delivery failure, relay or success 




r 




YES- 



22f5 

Change delivery status 
of destination y of 
message xxxxxx to 
"DELIVERED-TO- 
MAILBOX" 



YES- 



247 

Change delivery status 
of destination y of 
message xxxxxx to 
"FAILURE" 



-250. 



Save copies of 
MTA Notice 

and 
attachments 



248 

"Notification indicates^ 
message relayed 
onward? 



-YES- 



249 

Change delivery status 
of destination y of 
message xxxxxx to 
"RELAYED" 




251 
Processing 
Complete 



NO 



250 

From time to time the system 
will review the status of all 
pending messages 



FIG. 2D 

Post-Processing 

Message Management 



-YES- 



251 

For each message 
the system will 



402 
Examine the 
destination status 
(DS) for each 
destination 




NO 




15 

(Note: DS= "RELAYED", 

"UNDELIVERABLE", 
"DELIVERED-TO-MAILBOX" or 
"FAILURE") 

NO 

YES 




# 



# 



START HERE FROM FIGURE 
2D 




270 

The sytem generates an 
email Receipt which 
Includes: 



FIG. 2E 

Post-Processing 

Generate a Delivery Receipt 



271 

A message identifier for administrative purposes. 
This identifier may be or may include reference to the originator's id and/or the value of the Internet Message-ID of the originator's 

message as received by the system. 



272 

The quoted body of the original message together with the email addresses of its intended recipients. 



273 

A table for each recipient listing:: 

The Delivery status of the message for that destination based upon the Systems recorded delivery status. 

The time at which the recipient's MTA received the message and/or the time at which the system received a DSN from the 

recipient's MTA. 



274 

A list of the original attachments of the email together with their separate hash numbers. 



-2*5- 



Transcripts or abstractions of the transcripts of all of the SMTP dialogs generated in the delivery of the message to each 
— — — destination. 



276 

Quotations from the bodies and the attachments of all received DSNs including whatever details of delivery or disposition of the 

message that they might reveal 



277 

The system will attach to the receipt copies of all of the attachments of the original message 



1 

2" 

The system will attach received DSN mes 


r 

^8 

sages and their attachments to the receipt. 







279 

Having generated the text of the receipt so far, the system then generates an encrypted hash of the body of the receipt 



280 

The encrypted hash is appended to the body of the message as a digital signature 



281 

The receipt, now being complete, is sent by email to the originator with the advice that it be kept for the 

originator's records. 



- 

The system may now delete all copies of the original message, attachment and 
DSNs. 



FIG. 2F 

Post-Processing 

Generate a Reading Notice 



285 

The system receives MUA Notifications at an e-mail address 
used for this purpose, 
(e.g. readreceipt@rpost.com) 



286 

Extracts the address of the sender of the original message from 
the address of the MUA Notice where it is found in the name 
field of the message. 
(E.g. TO:jsmith@adomain.com <readreceipt@rpost.com> 



287 

Creates a receipt which includes: 

the subject of the MUA as its subject ; 
a heading e.g. " RPost Reading Receipt"; 

the body of the MUA Notice quoted in the body of the 
Receipt. 

a time/date stamp 



1 


f 


288 

Attach to the receipt any files that may accompany the MUA's 
receipt. 




r 


289 

Generate a hash for any files attached to the receipt and record 
this hash in the body of the receipt. 




r 


290 

Generate a hash for the body of the receipt and its attachments, 
encrypt this hash, and append the result to the message as a 
"document digital fingerprint". 




r 


2S 

Send the resulting receipt to t 


11 

he originator of the message. 



292 

Having sent this receipt, the system may delete all internal 
records of the transaction. 
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700 

fUsers submit receipts for validation by forwarding^ 
v them as emails to a specific rpost.com address. 
E.g. authentica@rpost.com 



FIG. 7 
Validating a receipt 



701 

When a receipt is received the operators of the 
system shall: 



702 

Detach and decrypt the document digital 
signature appended to the receipt. 



703 

Generate a hash of the balance of the document 




705 

Generate a report indicating that the operator of RPost cannot 
authenticate the receipt as an accurate record of the delivery or 
contents of the message described in the receipt. 



NO- 



YES 



706 

Generate a report indicating that the operator of RPost can 
authenticate the receipt as an accurate record of the delivery of the 
original message to its destination: 
that the body of the message was as appears in the receipt. 



301 

For each such file: 



ros 

Generate a hash of the 
attached file. 



70g- 

Compare the newly 
generated hash to the hash 
value quoted in the 
document. 



YES 




710 

Generate a report indicating that the operator of RPost can 
authenticate the receipt as an accurate record of the delivery of 
the original message to its destination: 
that the body of the message was as appears in the receipt, 
that each delivered attachment was identical to the copies 
appended to the receipt. 



NO-* 



712 

Generate a report indicating that RPost cannot 
authenticate the submitted receipt because the 
attached file appears to have been altered since 
the time the message was delivered. 



713 

Append a copy of the 
receipt to the report 



r 714 \ 

E-mail the report to the user J 
Vwho submitted the receipt./ 
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FIG. 9 

Validating Received Mail 



900 

To register an email for a recipient. 



1 


f 


901 

Receive email for recipient acting as an 
SMTP.POP or IMAP server. 


y 


f 


902 

Generate a hash/digital fingerprint for 
the content of the message and its 
attachments. 




f 


903 

Encrypt the hash(es). 




? 


904 

Append the encrypted hash(es) to the 
body of the message. 







905 

Make the message available for 
reading/download by the recipient's 
MUA. 



FIG. 10 

Registering Inbound Mail 



1000 

Recipient submits a copy of the 
^receive mail to the operators of the j 
system who: 



1001 

Decrypt the hash attached to the 
body of the message. 



1002 

Generate a hash of the body of the 
message and attachments. 



1003 

Compare the document hash(es) 
with the decrypted hash(es) 



1005 

The operators can warrant that the 
email is as originally received 



1006 

The operators can warrant that the e-mail 
las been altered since originally received/ 



